@trops/dash-core 0.1.61 → 0.1.63

package/dist/index.js

@@ -1180,12 +1180,13 @@ var ElectronDashboardApi = /*#__PURE__*/function () {
       if (this.api !== null) {
         try {
           // Handle the promise returned by the IPC call
-          // Note: providerData should contain providerType, credentials, and optionally providerClass/mcpConfig
+          // Note: providerData should contain providerType, credentials, and optionally providerClass/mcpConfig/allowedTools
           var providerType = providerData.providerType,
             credentials = providerData.credentials,
             providerClass = providerData.providerClass,
-            mcpConfig = providerData.mcpConfig;
-          this.api.providers.saveProvider(appId, providerName, providerType, credentials, providerClass, mcpConfig).then(function (result) {
+            mcpConfig = providerData.mcpConfig,
+            allowedTools = providerData.allowedTools;
+          this.api.providers.saveProvider(appId, providerName, providerType, credentials, providerClass, mcpConfig, allowedTools).then(function (result) {
             onSuccess(_this12.events.PROVIDER_SAVE_COMPLETE, result);
           })["catch"](function (error) {
             onError(_this12.events.PROVIDER_SAVE_ERROR, error);
@@ -2708,9 +2709,9 @@ var LayoutContainer = function LayoutContainer(_ref) {
 
 function ownKeys$v(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread$v(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys$v(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys$v(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
-function _createForOfIteratorHelper$9(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$9(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
-function _unsupportedIterableToArray$9(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$9(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$9(r, a) : void 0; } }
-function _arrayLikeToArray$9(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _createForOfIteratorHelper$a(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$a(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray$a(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$a(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$a(r, a) : void 0; } }
+function _arrayLikeToArray$a(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
 /**
  * Layout template definitions for the dashboard template picker.
  *
@@ -2946,7 +2947,7 @@ function createLayoutFromTemplate(template) {
     cols: template.cols,
     gap: "gap-2"
   };
-  var _iterator = _createForOfIteratorHelper$9(template.cells),
+  var _iterator = _createForOfIteratorHelper$a(template.cells),
     _step;
   try {
     for (_iterator.s(); !(_step = _iterator.n()).done;) {
@@ -4458,9 +4459,9 @@ var PanelEditItem = function PanelEditItem(_ref) {
 };
 
 var _excluded$5 = ["rows", "cols"];
-function _createForOfIteratorHelper$8(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$8(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
-function _unsupportedIterableToArray$8(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$8(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$8(r, a) : void 0; } }
-function _arrayLikeToArray$8(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _createForOfIteratorHelper$9(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$9(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray$9(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$9(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$9(r, a) : void 0; } }
+function _arrayLikeToArray$9(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
 function ownKeys$t(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread$t(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys$t(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys$t(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 var defaultGrid = {
@@ -4613,7 +4614,7 @@ function GridEditor(_ref) {
   function sortObjectByKeys(obj) {
     var sortedKeys = Object.keys(obj).sort();
     var sortedObj = {};
-    var _iterator = _createForOfIteratorHelper$8(sortedKeys),
+    var _iterator = _createForOfIteratorHelper$9(sortedKeys),
       _step;
     try {
       for (_iterator.s(); !(_step = _iterator.n()).done;) {
@@ -7337,9 +7338,9 @@ var ProviderForm = function ProviderForm(_ref) {
   });
 };
 
-function _createForOfIteratorHelper$7(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$7(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
-function _unsupportedIterableToArray$7(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$7(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$7(r, a) : void 0; } }
-function _arrayLikeToArray$7(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _createForOfIteratorHelper$8(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$8(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray$8(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$8(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$8(r, a) : void 0; } }
+function _arrayLikeToArray$8(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
 function ownKeys$r(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread$r(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys$r(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys$r(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 var EnhancedWidgetDropdown = function EnhancedWidgetDropdown(_ref) {
@@ -7548,11 +7549,11 @@ var EnhancedWidgetDropdown = function EnhancedWidgetDropdown(_ref) {
 
           // Flatten all widgets from all packages for the widget list
           flatWidgets = [];
-          _iterator = _createForOfIteratorHelper$7(result.packages || []);
+          _iterator = _createForOfIteratorHelper$8(result.packages || []);
           try {
             for (_iterator.s(); !(_step = _iterator.n()).done;) {
               pkg = _step.value;
-              _iterator2 = _createForOfIteratorHelper$7(pkg.widgets || []);
+              _iterator2 = _createForOfIteratorHelper$8(pkg.widgets || []);
               try {
                 for (_iterator2.s(); !(_step2 = _iterator2.n()).done;) {
                   widget = _step2.value;
@@ -8718,9 +8719,9 @@ var ProviderBadge = function ProviderBadge(_ref) {
   });
 };
 
-function _createForOfIteratorHelper$6(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$6(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
-function _unsupportedIterableToArray$6(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$6(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$6(r, a) : void 0; } }
-function _arrayLikeToArray$6(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _createForOfIteratorHelper$7(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$7(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray$7(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$7(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$7(r, a) : void 0; } }
+function _arrayLikeToArray$7(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
 var WidgetCardHeader = function WidgetCardHeader(_ref) {
   var item = _ref.item,
     widget = _ref.widget,
@@ -8764,7 +8765,7 @@ var WidgetCardHeader = function WidgetCardHeader(_ref) {
     var el = headerRef.current;
     if (!el) return;
     var observer = new ResizeObserver(function (entries) {
-      var _iterator = _createForOfIteratorHelper$6(entries),
+      var _iterator = _createForOfIteratorHelper$7(entries),
         _step;
       try {
         for (_iterator.s(); !(_step = _iterator.n()).done;) {
@@ -13677,9 +13678,9 @@ var ExternalWidget = function ExternalWidget(_ref) {
 var GRID_CELL_WIDGET_TYPE = "grid-cell-widget";
 var SIDEBAR_WIDGET_TYPE = "sidebar-widget";
 
-function _createForOfIteratorHelper$5(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$5(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
-function _unsupportedIterableToArray$5(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$5(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$5(r, a) : void 0; } }
-function _arrayLikeToArray$5(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _createForOfIteratorHelper$6(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$6(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray$6(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$6(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$6(r, a) : void 0; } }
+function _arrayLikeToArray$6(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
 function ownKeys$j(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread$j(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys$j(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys$j(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 var DraggableCellBody = function DraggableCellBody(_ref) {
@@ -14027,7 +14028,7 @@ var LayoutGridContainer = /*#__PURE__*/React.memo(function (_ref3) {
       return selectable["delete"](cn);
     });
     var resolved = new Set();
-    var _iterator = _createForOfIteratorHelper$5(selectable),
+    var _iterator = _createForOfIteratorHelper$6(selectable),
       _step;
     try {
       for (_iterator.s(); !(_step = _iterator.n()).done;) {
@@ -16133,9 +16134,9 @@ function isWidgetResolvable(componentKey) {
 
 function ownKeys$i(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread$i(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys$i(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys$i(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
-function _createForOfIteratorHelper$4(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$4(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
-function _unsupportedIterableToArray$4(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$4(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$4(r, a) : void 0; } }
-function _arrayLikeToArray$4(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _createForOfIteratorHelper$5(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$5(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray$5(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$5(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$5(r, a) : void 0; } }
+function _arrayLikeToArray$5(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
 /**
  * The model for all layout components used primarily in the renderLayout method
  * @param {Object} layoutItem an object containing various attributes of the layout item
@@ -16147,7 +16148,7 @@ function _arrayLikeToArray$4(r, a) { (null == a || a > r.length) && (a = r.lengt
 function sortObjectByKeys(obj) {
   var sortedKeys = Object.keys(obj).sort();
   var sortedObj = {};
-  var _iterator = _createForOfIteratorHelper$4(sortedKeys),
+  var _iterator = _createForOfIteratorHelper$5(sortedKeys),
     _step;
   try {
     for (_iterator.s(); !(_step = _iterator.n()).done;) {
@@ -19321,9 +19322,9 @@ var useDashboard = function useDashboard() {
   });
 };
 
-function _createForOfIteratorHelper$3(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$3(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
-function _unsupportedIterableToArray$3(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$3(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$3(r, a) : void 0; } }
-function _arrayLikeToArray$3(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _createForOfIteratorHelper$4(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$4(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray$4(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$4(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$4(r, a) : void 0; } }
+function _arrayLikeToArray$4(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
 
 /**
  * useWidgetProviders Hook
@@ -19374,7 +19375,7 @@ var useWidgetProviders = function useWidgetProviders() {
   // 1. Widget-level: stored directly on the layout item by handleSelectProvider
   // 2. Workspace-level: stored as workspace.selectedProviders[widgetId][providerType]
   var providers = {};
-  var _iterator = _createForOfIteratorHelper$3(providerDeclarations),
+  var _iterator = _createForOfIteratorHelper$4(providerDeclarations),
     _step;
   try {
     for (_iterator.s(); !(_step = _iterator.n()).done;) {
@@ -19501,15 +19502,8 @@ var useMcpProvider = function useMcpProvider(providerType) {
   var mountedRef = React.useRef(true);
   var dashApi = app === null || app === void 0 ? void 0 : app.dashApi;
 
-  // Get the widget's allowed tools from its provider declaration
+  // Get the widget data and compute effective allowed tools
   var widgetData = widgetContext === null || widgetContext === void 0 ? void 0 : widgetContext.widgetData;
-  var allowedTools = function () {
-    if (!(widgetData !== null && widgetData !== void 0 && widgetData.providers)) return null;
-    var mcpProvider = widgetData.providers.find(function (p) {
-      return p.type === providerType && p.providerClass === "mcp";
-    });
-    return (mcpProvider === null || mcpProvider === void 0 ? void 0 : mcpProvider.allowedTools) || null;
-  }();
 
   // Get the selected MCP provider for this widget
   // First check widget-level selectedProviders (set by handleSelectProvider on the layout item),
@@ -19532,16 +19526,37 @@ var useMcpProvider = function useMcpProvider(providerType) {
   // issue where providers don't flow through from AppWrapper)
   var provider = selectedProviderName ? app === null || app === void 0 || (_app$providers = app.providers) === null || _app$providers === void 0 ? void 0 : _app$providers[selectedProviderName] : null;
 
+  // Merge widget-declared allowedTools with user-configured allowedTools (intersection)
+  var effectiveAllowedTools = function () {
+    // Widget-declared (from .dash.js providers[].allowedTools)
+    var widgetAllowed = function () {
+      if (!(widgetData !== null && widgetData !== void 0 && widgetData.providers)) return null;
+      var p = widgetData.providers.find(function (p) {
+        return p.type === providerType && p.providerClass === "mcp";
+      });
+      return (p === null || p === void 0 ? void 0 : p.allowedTools) || null;
+    }();
+    // User-configured (from saved provider object)
+    var userAllowed = (provider === null || provider === void 0 ? void 0 : provider.allowedTools) || null;
+    // Intersection
+    if (!widgetAllowed && !userAllowed) return null;
+    if (!widgetAllowed) return userAllowed;
+    if (!userAllowed) return widgetAllowed;
+    return widgetAllowed.filter(function (t) {
+      return userAllowed.includes(t);
+    });
+  }();
+
   /**
    * Apply connection result to this hook instance's local state.
-   * Filters tools by allowedTools if specified.
+   * Filters tools by effectiveAllowedTools if specified.
    */
   var applyResult = React.useCallback(function (result) {
     if (!mountedRef.current) return;
     var serverTools = result.tools || [];
-    if (allowedTools) {
+    if (effectiveAllowedTools) {
       serverTools = serverTools.filter(function (tool) {
-        return allowedTools.includes(tool.name);
+        return effectiveAllowedTools.includes(tool.name);
       });
     }
     setTools(serverTools);
@@ -19550,7 +19565,7 @@ var useMcpProvider = function useMcpProvider(providerType) {
     setIsConnecting(false);
     setStatus("connected");
     connectedRef.current = true;
-  }, [allowedTools]);
+  }, [effectiveAllowedTools]);
 
   /**
    * Connect to the MCP server.
@@ -19807,6 +19822,8 @@ var useMcpProvider = function useMcpProvider(providerType) {
   var callTool = React.useCallback(/*#__PURE__*/function () {
     var _ref3 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee3(toolName) {
       var args,
+        widgetRequiredTools,
+        isRequired,
         _args3 = arguments;
       return _regeneratorRuntime.wrap(function (_context3) {
         while (1) switch (_context3.prev = _context3.next) {
@@ -19818,17 +19835,26 @@ var useMcpProvider = function useMcpProvider(providerType) {
             }
             throw new Error("MCP server not connected");
           case 1:
-            if (!(allowedTools && !allowedTools.includes(toolName))) {
+            if (!(effectiveAllowedTools && !effectiveAllowedTools.includes(toolName))) {
               _context3.next = 2;
               break;
             }
-            throw new Error("Tool \"".concat(toolName, "\" is not allowed for this widget. Allowed tools: ").concat(allowedTools.join(", ")));
+            // Provide enhanced error if the tool is in widget's requiredTools
+            widgetRequiredTools = function () {
+              if (!(widgetData !== null && widgetData !== void 0 && widgetData.providers)) return null;
+              var p = widgetData.providers.find(function (p) {
+                return p.type === providerType && p.providerClass === "mcp";
+              });
+              return (p === null || p === void 0 ? void 0 : p.requiredTools) || null;
+            }();
+            isRequired = widgetRequiredTools === null || widgetRequiredTools === void 0 ? void 0 : widgetRequiredTools.includes(toolName);
+            throw new Error("Tool \"".concat(toolName, "\" is not allowed for this widget. Allowed tools: ").concat(effectiveAllowedTools.join(", ")).concat(isRequired ? ". Note: \"".concat(toolName, "\" is declared as a required tool by this widget \u2014 update the provider's allowed tools in Settings \u2192 Providers.") : ""));
           case 2:
             return _context3.abrupt("return", new Promise(function (resolve, reject) {
               var timeout = setTimeout(function () {
                 reject(new Error("Tool call \"".concat(toolName, "\" timed out after 30s")));
               }, 30000);
-              dashApi.mcpCallTool(selectedProviderName, toolName, args, allowedTools, function (event, result) {
+              dashApi.mcpCallTool(selectedProviderName, toolName, args, effectiveAllowedTools, function (event, result) {
                 clearTimeout(timeout);
                 if (result.error) {
                   reject(new Error(result.message));
@@ -19849,7 +19875,7 @@ var useMcpProvider = function useMcpProvider(providerType) {
     return function (_x) {
       return _ref3.apply(this, arguments);
     };
-  }(), [dashApi, selectedProviderName, allowedTools]);
+  }(), [dashApi, selectedProviderName, effectiveAllowedTools, widgetData, providerType]);
 
   /**
    * Read a resource from the MCP server
@@ -22204,9 +22230,9 @@ var resolveIcon = function resolveIcon(iconName) {
   return FALLBACK;
 };
 
-function _createForOfIteratorHelper$2(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$2(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
-function _unsupportedIterableToArray$2(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$2(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$2(r, a) : void 0; } }
-function _arrayLikeToArray$2(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _createForOfIteratorHelper$3(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$3(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray$3(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$3(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$3(r, a) : void 0; } }
+function _arrayLikeToArray$3(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
 /**
  * Validation utilities for grid-first dashboard architecture
  *
@@ -22445,7 +22471,7 @@ var validateCellMerge = function validateCellMerge(cellNumbers, grid) {
 
     // Validate each cell
     var cells = [];
-    var _iterator = _createForOfIteratorHelper$2(cellNumbers),
+    var _iterator = _createForOfIteratorHelper$3(cellNumbers),
       _step;
     try {
       for (_iterator.s(); !(_step = _iterator.n()).done;) {
@@ -25947,6 +25973,82 @@ var FoldersSection = function FoldersSection(_ref) {
   });
 };
 
+var ToolSelector = function ToolSelector(_ref) {
+  var _ref$tools = _ref.tools,
+    tools = _ref$tools === void 0 ? [] : _ref$tools,
+    _ref$selectedTools = _ref.selectedTools,
+    selectedTools = _ref$selectedTools === void 0 ? [] : _ref$selectedTools,
+    onSelectionChange = _ref.onSelectionChange;
+  if (!tools || tools.length === 0) return null;
+  var allSelected = selectedTools.length === tools.length;
+  var handleToggleAll = function handleToggleAll() {
+    if (allSelected) {
+      onSelectionChange([]);
+    } else {
+      onSelectionChange(tools.map(function (t) {
+        return t.name;
+      }));
+    }
+  };
+  var handleToggle = function handleToggle(toolName) {
+    if (selectedTools.includes(toolName)) {
+      onSelectionChange(selectedTools.filter(function (t) {
+        return t !== toolName;
+      }));
+    } else {
+      onSelectionChange([].concat(_toConsumableArray(selectedTools), [toolName]));
+    }
+  };
+  return /*#__PURE__*/jsxRuntime.jsxs("div", {
+    className: "space-y-2",
+    children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+      className: "flex items-center justify-between",
+      children: [/*#__PURE__*/jsxRuntime.jsx("p", {
+        className: "text-xs font-semibold opacity-40 uppercase tracking-wider",
+        children: "Allowed Tools"
+      }), /*#__PURE__*/jsxRuntime.jsx("button", {
+        onClick: handleToggleAll,
+        className: "text-xs text-blue-400 hover:text-blue-300 transition-colors",
+        children: allSelected ? "Deselect All" : "Select All"
+      })]
+    }), /*#__PURE__*/jsxRuntime.jsx("p", {
+      className: "text-sm opacity-50",
+      children: "Choose which tools this provider can expose to widgets"
+    }), /*#__PURE__*/jsxRuntime.jsx("div", {
+      className: "space-y-1 max-h-64 overflow-y-auto",
+      children: tools.map(function (tool) {
+        var checked = selectedTools.includes(tool.name);
+        return /*#__PURE__*/jsxRuntime.jsxs("label", {
+          className: "flex items-start gap-2 p-1.5 rounded hover:bg-white/5 cursor-pointer",
+          children: [/*#__PURE__*/jsxRuntime.jsx("input", {
+            type: "checkbox",
+            checked: checked,
+            onChange: function onChange() {
+              return handleToggle(tool.name);
+            },
+            className: "mt-0.5 rounded border-white/20 bg-white/5 text-blue-500 focus:ring-blue-500/30"
+          }), /*#__PURE__*/jsxRuntime.jsxs("div", {
+            className: "flex-1 min-w-0",
+            children: [/*#__PURE__*/jsxRuntime.jsx("span", {
+              className: "text-xs font-mono",
+              children: tool.name
+            }), tool.description && /*#__PURE__*/jsxRuntime.jsxs("span", {
+              className: "text-xs opacity-50 ml-2",
+              children: ["\u2014 ", tool.description]
+            })]
+          })]
+        }, tool.name);
+      })
+    }), /*#__PURE__*/jsxRuntime.jsxs("p", {
+      className: "text-xs opacity-40",
+      children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.FontAwesomeIcon, {
+        icon: "shield-halved",
+        className: "mr-1"
+      }), selectedTools.length, " of ", tools.length, " tools selected"]
+    })]
+  });
+};
+
 function ownKeys$6(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread$6(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys$6(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys$6(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 var ProviderDetail = function ProviderDetail(_ref) {
@@ -25973,6 +26075,7 @@ var ProviderDetail = function ProviderDetail(_ref) {
     onStartEdit = _ref.onStartEdit,
     onCreate = _ref.onCreate,
     onDelete = _ref.onDelete,
+    onSaveAllowedTools = _ref.onSaveAllowedTools,
     _ref$catalogAuthComma = _ref.catalogAuthCommand,
     catalogAuthCommand = _ref$catalogAuthComma === void 0 ? null : _ref$catalogAuthComma;
   var appContext = React.useContext(AppContext);
@@ -25988,16 +26091,20 @@ var ProviderDetail = function ProviderDetail(_ref) {
     _useState4 = _slicedToArray(_useState3, 2),
     testResult = _useState4[0],
     setTestResult = _useState4[1];
+  var _useState5 = React.useState(null),
+    _useState6 = _slicedToArray(_useState5, 2),
+    selectedTools = _useState6[0],
+    setSelectedTools = _useState6[1];
 
   // MCP auth state
-  var _useState5 = React.useState(false),
-    _useState6 = _slicedToArray(_useState5, 2),
-    isAuthorizing = _useState6[0],
-    setIsAuthorizing = _useState6[1];
-  var _useState7 = React.useState(null),
+  var _useState7 = React.useState(false),
     _useState8 = _slicedToArray(_useState7, 2),
-    authResult = _useState8[0],
-    setAuthResult = _useState8[1];
+    isAuthorizing = _useState8[0],
+    setIsAuthorizing = _useState8[1];
+  var _useState9 = React.useState(null),
+    _useState0 = _slicedToArray(_useState9, 2),
+    authResult = _useState0[0],
+    setAuthResult = _useState0[1];
 
   // Resolve authCommand: provider.mcpConfig.authCommand > catalogAuthCommand prop
   var resolvedAuthCommand = (provider === null || provider === void 0 || (_provider$mcpConfig = provider.mcpConfig) === null || _provider$mcpConfig === void 0 ? void 0 : _provider$mcpConfig.authCommand) || catalogAuthCommand || null;
@@ -26015,14 +26122,14 @@ var ProviderDetail = function ProviderDetail(_ref) {
   }, [isMcp, provider]);
 
   // Dynamic credential fields for create mode
-  var _useState9 = React.useState(isCreating ? [{
+  var _useState1 = React.useState(isCreating ? [{
       id: "default_apiKey",
       key: "apiKey",
       secret: true
     }] : []),
-    _useState0 = _slicedToArray(_useState9, 2),
-    credentialFields = _useState0[0],
-    setCredentialFields = _useState0[1];
+    _useState10 = _slicedToArray(_useState1, 2),
+    credentialFields = _useState10[0],
+    setCredentialFields = _useState10[1];
   var fieldIdRef = React.useRef(0);
   var handleFieldKeyChange = function handleFieldKeyChange(id, newKey) {
     setCredentialFields(function (prev) {
@@ -26114,6 +26221,18 @@ var ProviderDetail = function ProviderDetail(_ref) {
         message: "Connected! Found ".concat((result.tools || []).length, " tools.")
       });
 
+      // Pre-select: intersect with existing allowedTools, or select all
+      var allToolNames = (result.tools || []).map(function (t) {
+        return t.name;
+      });
+      if (provider !== null && provider !== void 0 && provider.allowedTools) {
+        setSelectedTools(allToolNames.filter(function (t) {
+          return provider.allowedTools.includes(t);
+        }));
+      } else {
+        setSelectedTools(allToolNames);
+      }
+
       // Stop after test
       dashApi.mcpStopServer(providerName, function () {}, function () {});
       setIsTesting(false);
@@ -26472,29 +26591,36 @@ var ProviderDetail = function ProviderDetail(_ref) {
               children: authResult.message
             })]
           })
-        }), testResult && /*#__PURE__*/jsxRuntime.jsxs("div", {
+        }), testResult && /*#__PURE__*/jsxRuntime.jsx("div", {
           className: "p-3 rounded-lg text-sm ".concat(testResult.success ? "bg-green-900/30 border border-green-700 text-green-300" : "bg-red-900/30 border border-red-700 text-red-300"),
-          children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+          children: /*#__PURE__*/jsxRuntime.jsxs("div", {
             className: "flex items-center gap-2",
             children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.FontAwesomeIcon, {
               icon: testResult.success ? "circle-check" : "circle-exclamation"
             }), /*#__PURE__*/jsxRuntime.jsx("span", {
               children: testResult.message
             })]
-          }), testResult.success && ((_testResult$tools = testResult.tools) === null || _testResult$tools === void 0 ? void 0 : _testResult$tools.length) > 0 && /*#__PURE__*/jsxRuntime.jsx("div", {
-            className: "mt-2 ml-6 space-y-1",
-            children: testResult.tools.map(function (tool) {
-              return /*#__PURE__*/jsxRuntime.jsxs("div", {
-                className: "text-xs",
-                children: [/*#__PURE__*/jsxRuntime.jsx("span", {
-                  className: "font-mono",
-                  children: tool.name
-                }), tool.description && /*#__PURE__*/jsxRuntime.jsxs("span", {
-                  className: "opacity-60 ml-2",
-                  children: ["- ", tool.description]
-                })]
-              }, tool.name);
+          })
+        }), (testResult === null || testResult === void 0 ? void 0 : testResult.success) && ((_testResult$tools = testResult.tools) === null || _testResult$tools === void 0 ? void 0 : _testResult$tools.length) > 0 && selectedTools && /*#__PURE__*/jsxRuntime.jsx(ToolSelector, {
+          tools: testResult.tools,
+          selectedTools: selectedTools,
+          onSelectionChange: setSelectedTools
+        }), !testResult && (provider === null || provider === void 0 ? void 0 : provider.allowedTools) && provider.allowedTools.length > 0 && /*#__PURE__*/jsxRuntime.jsxs("div", {
+          className: "space-y-2",
+          children: [/*#__PURE__*/jsxRuntime.jsx("p", {
+            className: "text-xs font-semibold opacity-40 uppercase tracking-wider",
+            children: "Allowed Tools"
+          }), /*#__PURE__*/jsxRuntime.jsx("div", {
+            className: "flex flex-wrap gap-1",
+            children: provider.allowedTools.map(function (tool) {
+              return /*#__PURE__*/jsxRuntime.jsx("span", {
+                className: "text-xs font-mono px-2 py-0.5 rounded bg-white/5 opacity-70",
+                children: tool
+              }, tool);
             })
+          }), /*#__PURE__*/jsxRuntime.jsxs("p", {
+            className: "text-xs opacity-40",
+            children: [provider.allowedTools.length, " tool", provider.allowedTools.length !== 1 ? "s" : "", " allowed \u2014 test connection to modify"]
           })]
         })]
       })]
@@ -26508,6 +26634,12 @@ var ProviderDetail = function ProviderDetail(_ref) {
         title: isTesting ? "Testing..." : "Test Connection",
         onClick: handleTestConnection,
         size: "sm"
+      }), isMcp && selectedTools && onSaveAllowedTools && /*#__PURE__*/jsxRuntime.jsx(DashReact.Button, {
+        title: "Update Allowed Tools",
+        onClick: function onClick() {
+          return onSaveAllowedTools(providerName, selectedTools);
+        },
+        size: "sm"
       }), /*#__PURE__*/jsxRuntime.jsx(DashReact.Button, {
         title: "Edit",
         onClick: function onClick() {
@@ -26621,7 +26753,9 @@ var CustomMcpServerForm = function CustomMcpServerForm(_ref2) {
     _ref2$initialHeaderRo = _ref2.initialHeaderRows,
     initialHeaderRows = _ref2$initialHeaderRo === void 0 ? [] : _ref2$initialHeaderRo,
     _ref2$initialCredenti2 = _ref2.initialCredentials,
-    initialCredentials = _ref2$initialCredenti2 === void 0 ? {} : _ref2$initialCredenti2;
+    initialCredentials = _ref2$initialCredenti2 === void 0 ? {} : _ref2$initialCredenti2,
+    _ref2$initialAllowedT = _ref2.initialAllowedTools,
+    initialAllowedTools = _ref2$initialAllowedT === void 0 ? null : _ref2$initialAllowedT;
   var appContext = React.useContext(AppContext);
   var dashApi = appContext === null || appContext === void 0 ? void 0 : appContext.dashApi;
 
@@ -26677,19 +26811,25 @@ var CustomMcpServerForm = function CustomMcpServerForm(_ref2) {
     headerRows = _useState20[0],
     setHeaderRows = _useState20[1];
 
-  // JSON editor state
-  var _useState21 = React.useState("form"),
+  // Tool selection state
+  var _useState21 = React.useState(initialAllowedTools),
     _useState22 = _slicedToArray(_useState21, 2),
-    viewMode = _useState22[0],
-    setViewMode = _useState22[1]; // "form" | "json"
-  var _useState23 = React.useState(""),
+    selectedTools = _useState22[0],
+    setSelectedTools = _useState22[1];
+
+  // JSON editor state
+  var _useState23 = React.useState("form"),
     _useState24 = _slicedToArray(_useState23, 2),
-    jsonText = _useState24[0],
-    setJsonText = _useState24[1];
-  var _useState25 = React.useState(null),
+    viewMode = _useState24[0],
+    setViewMode = _useState24[1]; // "form" | "json"
+  var _useState25 = React.useState(""),
     _useState26 = _slicedToArray(_useState25, 2),
-    jsonError = _useState26[0],
-    setJsonError = _useState26[1];
+    jsonText = _useState26[0],
+    setJsonText = _useState26[1];
+  var _useState27 = React.useState(null),
+    _useState28 = _slicedToArray(_useState27, 2),
+    jsonError = _useState28[0],
+    setJsonError = _useState28[1];
 
   // Clear credential data when transport changes (derived fields change entirely)
   // Only in create mode — in edit mode the initial transport is set correctly
@@ -26858,6 +26998,18 @@ var CustomMcpServerForm = function CustomMcpServerForm(_ref2) {
         resources: result.resources || [],
         message: "Connected! Found ".concat((result.tools || []).length, " tools.")
       });
+
+      // Pre-select tools: intersect with existing allowedTools if editing, or select all
+      var allToolNames = (result.tools || []).map(function (t) {
+        return t.name;
+      });
+      if (initialAllowedTools) {
+        setSelectedTools(allToolNames.filter(function (t) {
+          return initialAllowedTools.includes(t);
+        }));
+      } else {
+        setSelectedTools(allToolNames);
+      }
       dashApi.mcpStopServer(testName, function () {}, function () {});
       setIsTesting(false);
     }, function (event, err) {
@@ -26890,11 +27042,11 @@ var CustomMcpServerForm = function CustomMcpServerForm(_ref2) {
         url: result.url,
         headerRows: result.headerRows
       });
-      onSave(name, initialProviderType, result.credentialData, config);
+      onSave(name, initialProviderType, result.credentialData, config, selectedTools);
       return;
     }
     if (!validateForm()) return;
-    onSave(providerName.trim(), initialProviderType, credentialData, mcpConfig);
+    onSave(providerName.trim(), initialProviderType, credentialData, mcpConfig, selectedTools);
   };
   return /*#__PURE__*/jsxRuntime.jsxs("div", {
     className: "flex flex-col flex-1 min-h-0",
@@ -27278,30 +27430,20 @@ var CustomMcpServerForm = function CustomMcpServerForm(_ref2) {
             }, field.key);
           })]
         })]
-      }), testResult && /*#__PURE__*/jsxRuntime.jsxs("div", {
+      }), testResult && /*#__PURE__*/jsxRuntime.jsx("div", {
         className: "p-3 rounded-lg text-sm ".concat(testResult.success ? "bg-green-900/30 border border-green-700 text-green-300" : "bg-red-900/30 border border-red-700 text-red-300"),
-        children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+        children: /*#__PURE__*/jsxRuntime.jsxs("div", {
           className: "flex items-center gap-2",
           children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.FontAwesomeIcon, {
             icon: testResult.success ? "circle-check" : "circle-exclamation"
           }), /*#__PURE__*/jsxRuntime.jsx("span", {
             children: testResult.message
           })]
-        }), testResult.success && ((_testResult$tools = testResult.tools) === null || _testResult$tools === void 0 ? void 0 : _testResult$tools.length) > 0 && /*#__PURE__*/jsxRuntime.jsx("div", {
-          className: "mt-2 ml-6 space-y-1",
-          children: testResult.tools.map(function (tool) {
-            return /*#__PURE__*/jsxRuntime.jsxs("div", {
-              className: "text-xs",
-              children: [/*#__PURE__*/jsxRuntime.jsx("span", {
-                className: "font-mono",
-                children: tool.name
-              }), tool.description && /*#__PURE__*/jsxRuntime.jsxs("span", {
-                className: "opacity-60 ml-2",
-                children: ["- ", tool.description]
-              })]
-            }, tool.name);
-          })
-        })]
+        })
+      }), (testResult === null || testResult === void 0 ? void 0 : testResult.success) && ((_testResult$tools = testResult.tools) === null || _testResult$tools === void 0 ? void 0 : _testResult$tools.length) > 0 && selectedTools && /*#__PURE__*/jsxRuntime.jsx(ToolSelector, {
+        tools: testResult.tools,
+        selectedTools: selectedTools,
+        onSelectionChange: setSelectedTools
       })]
     }), /*#__PURE__*/jsxRuntime.jsxs("div", {
       className: "flex-shrink-0 flex flex-row justify-end gap-2 px-6 py-4 border-t border-white/10",
@@ -27399,30 +27541,34 @@ var McpCatalogDetail = function McpCatalogDetail(_ref) {
     _useState18 = _slicedToArray(_useState17, 2),
     authResult = _useState18[0],
     setAuthResult = _useState18[1];
+  var _useState19 = React.useState(null),
+    _useState20 = _slicedToArray(_useState19, 2),
+    selectedTools = _useState20[0],
+    setSelectedTools = _useState20[1];
 
   // Configuration form state
-  var _useState19 = React.useState(""),
-    _useState20 = _slicedToArray(_useState19, 2),
-    providerName = _useState20[0],
-    setProviderName = _useState20[1];
-  var _useState21 = React.useState({}),
+  var _useState21 = React.useState(""),
     _useState22 = _slicedToArray(_useState21, 2),
-    credentialData = _useState22[0],
-    setCredentialData = _useState22[1];
+    providerName = _useState22[0],
+    setProviderName = _useState22[1];
   var _useState23 = React.useState({}),
     _useState24 = _slicedToArray(_useState23, 2),
-    formErrors = _useState24[0],
-    setFormErrors = _useState24[1];
+    credentialData = _useState24[0],
+    setCredentialData = _useState24[1];
+  var _useState25 = React.useState({}),
+    _useState26 = _slicedToArray(_useState25, 2),
+    formErrors = _useState26[0],
+    setFormErrors = _useState26[1];
 
   // Advanced config row state
-  var _useState25 = React.useState([]),
-    _useState26 = _slicedToArray(_useState25, 2),
-    envMappingRows = _useState26[0],
-    setEnvMappingRows = _useState26[1];
   var _useState27 = React.useState([]),
     _useState28 = _slicedToArray(_useState27, 2),
-    headerRows = _useState28[0],
-    setHeaderRows = _useState28[1];
+    envMappingRows = _useState28[0],
+    setEnvMappingRows = _useState28[1];
+  var _useState29 = React.useState([]),
+    _useState30 = _slicedToArray(_useState29, 2),
+    headerRows = _useState30[0],
+    setHeaderRows = _useState30[1];
   var rowIdRef = React.useRef(0);
   var nextRowId = function nextRowId() {
     return "cat_".concat(++rowIdRef.current);
@@ -27529,6 +27675,11 @@ var McpCatalogDetail = function McpCatalogDetail(_ref) {
         message: "Connected! Found ".concat((result.tools || []).length, " tools.")
       });
 
+      // Pre-select all tools
+      setSelectedTools((result.tools || []).map(function (t) {
+        return t.name;
+      }));
+
       // Stop the test server
       dashApi.mcpStopServer(testName, function () {}, function () {});
       setIsTesting(false);
@@ -27571,7 +27722,7 @@ var McpCatalogDetail = function McpCatalogDetail(_ref) {
   // Handle save
   var handleSaveProvider = function handleSaveProvider() {
     if (!selectedServer || !validateForm()) return;
-    onSave(providerName.trim(), selectedServer.id, credentialData, effectiveMcpConfig);
+    onSave(providerName.trim(), selectedServer.id, credentialData, effectiveMcpConfig, selectedTools);
   };
 
   // Select custom server option
@@ -27592,6 +27743,7 @@ var McpCatalogDetail = function McpCatalogDetail(_ref) {
     setIsCustom(false);
     setTestResult(null);
     setAuthResult(null);
+    setSelectedTools(null);
     setProviderName("");
     setCredentialData({});
     setFormErrors({});
@@ -27790,30 +27942,20 @@ var McpCatalogDetail = function McpCatalogDetail(_ref) {
               children: authResult.message
             })]
           })
-        }), testResult && /*#__PURE__*/jsxRuntime.jsxs("div", {
+        }), testResult && /*#__PURE__*/jsxRuntime.jsx("div", {
           className: "p-3 rounded-lg text-sm ".concat(testResult.success ? "bg-green-900/30 border border-green-700 text-green-300" : "bg-red-900/30 border border-red-700 text-red-300"),
-          children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+          children: /*#__PURE__*/jsxRuntime.jsxs("div", {
             className: "flex items-center gap-2",
             children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.FontAwesomeIcon, {
               icon: testResult.success ? "circle-check" : "circle-exclamation"
             }), /*#__PURE__*/jsxRuntime.jsx("span", {
               children: testResult.message
             })]
-          }), testResult.success && ((_testResult$tools = testResult.tools) === null || _testResult$tools === void 0 ? void 0 : _testResult$tools.length) > 0 && /*#__PURE__*/jsxRuntime.jsx("div", {
-            className: "mt-2 ml-6 space-y-1",
-            children: testResult.tools.map(function (tool) {
-              return /*#__PURE__*/jsxRuntime.jsxs("div", {
-                className: "text-xs",
-                children: [/*#__PURE__*/jsxRuntime.jsx("span", {
-                  className: "font-mono",
-                  children: tool.name
-                }), tool.description && /*#__PURE__*/jsxRuntime.jsxs("span", {
-                  className: "opacity-60 ml-2",
-                  children: ["- ", tool.description]
-                })]
-              }, tool.name);
-            })
-          })]
+          })
+        }), (testResult === null || testResult === void 0 ? void 0 : testResult.success) && ((_testResult$tools = testResult.tools) === null || _testResult$tools === void 0 ? void 0 : _testResult$tools.length) > 0 && selectedTools && /*#__PURE__*/jsxRuntime.jsx(ToolSelector, {
+          tools: testResult.tools,
+          selectedTools: selectedTools,
+          onSelectionChange: setSelectedTools
         })]
       }), /*#__PURE__*/jsxRuntime.jsxs("div", {
         className: "flex-shrink-0 flex flex-row justify-end gap-2 px-6 py-4 border-t border-white/10",
@@ -28084,12 +28226,14 @@ var ProvidersSection = function ProvidersSection(_ref) {
 
   // Handle MCP provider creation from catalog picker
   function handleMcpSave(providerName, providerType, mcpCredentials, mcpConfig) {
+    var allowedTools = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : null;
     if (!dashApi || !appId) return;
     dashApi.saveProvider(appId, providerName, {
       providerType: providerType,
       credentials: mcpCredentials,
       providerClass: "mcp",
-      mcpConfig: mcpConfig
+      mcpConfig: mcpConfig,
+      allowedTools: allowedTools
     }, function () {
       setIsAddingMcp(false);
       refreshProviders && refreshProviders();
@@ -28102,6 +28246,7 @@ var ProvidersSection = function ProvidersSection(_ref) {
 
   // Handle MCP provider editing via CustomMcpServerForm
   function handleMcpEditSave(providerName, providerType, mcpCredentials, mcpConfig) {
+    var allowedTools = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : null;
     if (!dashApi || !appId) return;
     var originalName = selectedName;
 
@@ -28113,7 +28258,8 @@ var ProvidersSection = function ProvidersSection(_ref) {
       providerType: providerType,
       credentials: mcpCredentials,
       providerClass: "mcp",
-      mcpConfig: mcpConfig
+      mcpConfig: mcpConfig,
+      allowedTools: allowedTools
     }, function () {
       setSelectedName(providerName);
       setProviderTab("mcp");
@@ -28125,6 +28271,24 @@ var ProvidersSection = function ProvidersSection(_ref) {
     });
   }
 
+  // Handle saving just allowedTools for an existing MCP provider
+  function handleSaveAllowedTools(providerName, allowedTools) {
+    if (!dashApi || !appId) return;
+    var existingProvider = providers[providerName];
+    if (!existingProvider) return;
+    dashApi.saveProvider(appId, providerName, {
+      providerType: existingProvider.type,
+      credentials: existingProvider.credentials,
+      providerClass: "mcp",
+      mcpConfig: existingProvider.mcpConfig,
+      allowedTools: allowedTools
+    }, function () {
+      refreshProviders && refreshProviders();
+    }, function (e, err) {
+      return (void 0);
+    });
+  }
+
   // Respond to external create trigger from header
   var prevCreateRequested = React.useRef(false);
   React.useEffect(function () {
@@ -28251,6 +28415,7 @@ var ProvidersSection = function ProvidersSection(_ref) {
       initialUrl: mc.url || "",
       initialHeaderRows: headerTemplateToRows(mc.headerTemplate, nextRowId),
       initialCredentials: selectedProvider.credentials || {},
+      initialAllowedTools: selectedProvider.allowedTools || null,
       onSave: handleMcpEditSave,
       onBack: function onBack() {
         return setIsEditingMcp(false);
@@ -28277,6 +28442,7 @@ var ProvidersSection = function ProvidersSection(_ref) {
       onDelete: function onDelete(name) {
         return setDeleteTarget(name);
       },
+      onSaveAllowedTools: handleSaveAllowedTools,
       catalogAuthCommand: (catalogEntry === null || catalogEntry === void 0 ? void 0 : catalogEntry.authCommand) || null
     });
   }
@@ -29009,9 +29175,20 @@ var InstalledWidgetDetail = function InstalledWidgetDetail(_ref) {
         }), /*#__PURE__*/jsxRuntime.jsx("div", {
           className: "flex flex-wrap gap-1.5",
           children: widget.providers.map(function (p, i) {
-            return /*#__PURE__*/jsxRuntime.jsxs("span", {
-              className: "text-xs px-2 py-0.5 rounded ".concat(currentTheme["bg-primary-medium"] || "bg-white/10", " opacity-70"),
-              children: [p.type, p.providerClass === "mcp" ? " (MCP)" : ""]
+            return /*#__PURE__*/jsxRuntime.jsxs("div", {
+              className: "flex flex-col gap-1",
+              children: [/*#__PURE__*/jsxRuntime.jsxs("span", {
+                className: "text-xs px-2 py-0.5 rounded ".concat(currentTheme["bg-primary-medium"] || "bg-white/10", " opacity-70 w-fit"),
+                children: [p.type, p.providerClass === "mcp" ? " (MCP)" : ""]
+              }), p.requiredTools && p.requiredTools.length > 0 && /*#__PURE__*/jsxRuntime.jsx("div", {
+                className: "flex flex-wrap gap-1 ml-2",
+                children: p.requiredTools.map(function (tool) {
+                  return /*#__PURE__*/jsxRuntime.jsx("span", {
+                    className: "text-[10px] font-mono px-1.5 py-0.5 rounded bg-blue-900/30 text-blue-400",
+                    children: tool
+                  }, tool);
+                })
+              })]
             }, i);
           })
         })]
@@ -29196,14 +29373,33 @@ var RegistryPackageDetail = function RegistryPackageDetail(_ref) {
               }), w.description && /*#__PURE__*/jsxRuntime.jsx("div", {
                 className: "text-xs opacity-50 mt-0.5",
                 children: w.description
-              }), w.providers && w.providers.length > 0 && /*#__PURE__*/jsxRuntime.jsx("div", {
-                className: "flex gap-1 mt-1",
-                children: w.providers.map(function (p, pidx) {
-                  return /*#__PURE__*/jsxRuntime.jsxs("span", {
-                    className: "text-xs px-1.5 py-0.5 rounded bg-blue-900/30 text-blue-400",
-                    children: [p.type, p.required ? " *" : ""]
-                  }, pidx);
-                })
+              }), w.providers && w.providers.length > 0 && /*#__PURE__*/jsxRuntime.jsxs("div", {
+                className: "space-y-1 mt-1",
+                children: [/*#__PURE__*/jsxRuntime.jsx("div", {
+                  className: "flex gap-1 flex-wrap",
+                  children: w.providers.map(function (p, pidx) {
+                    return /*#__PURE__*/jsxRuntime.jsxs("span", {
+                      className: "text-xs px-1.5 py-0.5 rounded bg-blue-900/30 text-blue-400",
+                      children: [p.type, p.required ? " *" : ""]
+                    }, pidx);
+                  })
+                }), w.providers.some(function (p) {
+                  var _p$requiredTools;
+                  return ((_p$requiredTools = p.requiredTools) === null || _p$requiredTools === void 0 ? void 0 : _p$requiredTools.length) > 0;
+                }) && /*#__PURE__*/jsxRuntime.jsx("div", {
+                  className: "flex flex-wrap gap-1 ml-1",
+                  children: w.providers.filter(function (p) {
+                    var _p$requiredTools2;
+                    return ((_p$requiredTools2 = p.requiredTools) === null || _p$requiredTools2 === void 0 ? void 0 : _p$requiredTools2.length) > 0;
+                  }).flatMap(function (p) {
+                    return p.requiredTools.map(function (tool) {
+                      return /*#__PURE__*/jsxRuntime.jsx("span", {
+                        className: "text-[10px] font-mono px-1.5 py-0.5 rounded bg-white/5 opacity-60",
+                        children: tool
+                      }, "".concat(p.type, "-").concat(tool));
+                    });
+                  })
+                })]
               })]
             }, idx);
           })
@@ -29243,9 +29439,9 @@ var RegistryPackageDetail = function RegistryPackageDetail(_ref) {
   });
 };
 
-function _createForOfIteratorHelper$1(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$1(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
-function _unsupportedIterableToArray$1(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$1(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$1(r, a) : void 0; } }
-function _arrayLikeToArray$1(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _createForOfIteratorHelper$2(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$2(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray$2(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$2(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$2(r, a) : void 0; } }
+function _arrayLikeToArray$2(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
 
 /**
  * useRegistrySearch — shared hook for browsing and installing registry packages.
@@ -29320,11 +29516,11 @@ var useRegistrySearch = function useRegistrySearch() {
 
             // Flatten packages into widget entries
             widgets = [];
-            _iterator = _createForOfIteratorHelper$1(pkgs);
+            _iterator = _createForOfIteratorHelper$2(pkgs);
             try {
               for (_iterator.s(); !(_step = _iterator.n()).done;) {
                 pkg = _step.value;
-                _iterator2 = _createForOfIteratorHelper$1(pkg.widgets || []);
+                _iterator2 = _createForOfIteratorHelper$2(pkg.widgets || []);
                 try {
                   for (_iterator2.s(); !(_step2 = _iterator2.n()).done;) {
                     widget = _step2.value;
@@ -29451,10 +29647,15 @@ var useRegistrySearch = function useRegistrySearch() {
   };
 };
 
+function _createForOfIteratorHelper$1(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$1(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
+function _unsupportedIterableToArray$1(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$1(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$1(r, a) : void 0; } }
+function _arrayLikeToArray$1(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
 var DiscoverWidgetsDetail = function DiscoverWidgetsDetail(_ref) {
   var onBack = _ref.onBack;
   var _useContext = React.useContext(DashReact.ThemeContext),
     currentTheme = _useContext.currentTheme;
+  var appContext = React.useContext(AppContext);
+  var providers = (appContext === null || appContext === void 0 ? void 0 : appContext.providers) || {};
   var panelStyles = DashReact.getStylesForItem(DashReact.themeObjects.PANEL, currentTheme, {
     grow: false
   });
@@ -29473,10 +29674,90 @@ var DiscoverWidgetsDetail = function DiscoverWidgetsDetail(_ref) {
     _useState2 = _slicedToArray(_useState, 2),
     selectedPackageName = _useState2[0],
     setSelectedPackageName = _useState2[1];
+  var _useState3 = React.useState(null),
+    _useState4 = _slicedToArray(_useState3, 2),
+    toolConflictWarning = _useState4[0],
+    setToolConflictWarning = _useState4[1];
   var selectedWidget = selectedPackageName ? flatWidgets.find(function (w) {
     return w.packageName === selectedPackageName;
   }) : null;
+
+  // Check if widget's requiredTools conflict with user's provider allowedTools
+  var checkToolConflicts = function checkToolConflicts(widget) {
+    var conflicts = [];
+    var packageWidgets = widget.packageWidgets || [];
+    var _iterator = _createForOfIteratorHelper$1(packageWidgets),
+      _step;
+    try {
+      for (_iterator.s(); !(_step = _iterator.n()).done;) {
+        var w = _step.value;
+        var _iterator2 = _createForOfIteratorHelper$1(w.providers || []),
+          _step2;
+        try {
+          var _loop = function _loop() {
+            var _p$requiredTools;
+            var p = _step2.value;
+            if (!((_p$requiredTools = p.requiredTools) !== null && _p$requiredTools !== void 0 && _p$requiredTools.length) || p.providerClass !== "mcp") return 1; // continue
+            // Find matching user provider
+            var matchingProviders = Object.entries(providers).filter(function (_ref2) {
+              var _ref3 = _slicedToArray(_ref2, 2),
+                prov = _ref3[1];
+              return prov.type === p.type && prov.providerClass === "mcp" && prov.allowedTools;
+            });
+            var _iterator3 = _createForOfIteratorHelper$1(matchingProviders),
+              _step3;
+            try {
+              var _loop2 = function _loop2() {
+                var _step3$value = _slicedToArray(_step3.value, 2),
+                  provName = _step3$value[0],
+                  prov = _step3$value[1];
+                var blocked = p.requiredTools.filter(function (t) {
+                  return !prov.allowedTools.includes(t);
+                });
+                if (blocked.length > 0) {
+                  conflicts.push({
+                    widgetName: w.displayName || w.name,
+                    providerName: provName,
+                    blockedTools: blocked
+                  });
+                }
+              };
+              for (_iterator3.s(); !(_step3 = _iterator3.n()).done;) {
+                _loop2();
+              }
+            } catch (err) {
+              _iterator3.e(err);
+            } finally {
+              _iterator3.f();
+            }
+          };
+          for (_iterator2.s(); !(_step2 = _iterator2.n()).done;) {
+            if (_loop()) continue;
+          }
+        } catch (err) {
+          _iterator2.e(err);
+        } finally {
+          _iterator2.f();
+        }
+      }
+    } catch (err) {
+      _iterator.e(err);
+    } finally {
+      _iterator.f();
+    }
+    return conflicts;
+  };
   var handleInstall = function handleInstall() {
+    if (!selectedWidget) return;
+    var conflicts = checkToolConflicts(selectedWidget);
+    if (conflicts.length > 0) {
+      setToolConflictWarning(conflicts);
+    } else {
+      installPackage(selectedWidget);
+    }
+  };
+  var handleConfirmInstall = function handleConfirmInstall() {
+    setToolConflictWarning(null);
     if (selectedWidget) {
       installPackage(selectedWidget);
     }
@@ -29596,6 +29877,20 @@ var DiscoverWidgetsDetail = function DiscoverWidgetsDetail(_ref) {
     }), !isLoading && !error && packages.length > 0 && /*#__PURE__*/jsxRuntime.jsxs("div", {
       className: "flex-shrink-0 px-4 py-2 text-[10px] opacity-40 border-t border-white/10",
       children: [packages.length, " package", packages.length !== 1 ? "s" : ""]
+    }), /*#__PURE__*/jsxRuntime.jsx(DashReact.ConfirmationModal, {
+      isOpen: !!toolConflictWarning,
+      setIsOpen: function setIsOpen() {
+        return setToolConflictWarning(null);
+      },
+      title: "Tool Access Conflict",
+      message: toolConflictWarning ? "This widget requires tools that are blocked by your provider settings:\n\n".concat(toolConflictWarning.map(function (c) {
+        return "\u2022 ".concat(c.widgetName, " needs ").concat(c.blockedTools.join(", "), " (blocked by \"").concat(c.providerName, "\")");
+      }).join("\n"), "\n\nYou can update allowed tools in Settings \u2192 Providers after installing.") : "",
+      confirmLabel: "Install Anyway",
+      onConfirm: handleConfirmInstall,
+      onCancel: function onCancel() {
+        return setToolConflictWarning(null);
+      }
     })]
   });
 };